SQL Server Authentication Vs Windows Authentication
Would anyone please help me out here. which of the 2 modes of authentication is better and why??
View Complete Forum Thread with Replies
Related Forum Messages:
Report Manager With Forms Authentication. Report Server With Windows Authentication.
Hi. I wonder if it is possible to set forms authentication for report manager but leave report server "as it is". I need to authenticate users from external LDAP and can't use windows authentication for report manager, but I would also like to leave report server open for anonymous users. In that way authenticated administrators could create reports which anonymous users could read. I tested the Security Extension Sample and got it working when I rewrote the authentication part with my own LDAP authentication. If I have understood correctly, the report manager is just application inside report server so is it possible to use forms authentication with one application but still leave the report server with Windows authentication?
View Replies !
Sql Authentication = Fast./ Windows Authentication = V.slow!
Hello, (Using win2k, sqlserver2k, framework 1.1) I have an fairly data-heavy application that uses Windows authentication (Trusted connection/aspnet account) to connect to Sql Server. The site uses IIS basic authentication. On the dev server everything works fine but when I move to the live server things get strange and it starts to crawl along. (Pages load OK but then it just crawls as it loads the datagrids etc. Sometimes it brings back incomplete/incorrect data ) BUT When I use Sql Authentication to connect to Sql Server and there is no problem at all! Ok, there is something obviously wrong with the live server (which is identical setup to dev)but I dont know where to start. Any ideas??
View Replies !
Using SQL Authentication And Windows Integrated Authentication Concurrently
Hi all, I've got two applications which both have a database on my MS SQL 2000 server. The problem is, one application must use Windows Integrated Authentication (which it is currently using and cannot be changed) whilst the other application which I'm trying to configure must use a SQL password. Since the server has already been configured to use Windows Integrated Authentication for the existing database and application, how do I configure the other database to use the SQL password? Thanks.
View Replies !
Authentication An Application Using Windows Integrated Authentication
Hi all, My work is using a shared application which accesses a MSSQL 2000 database. To access the application, the folder on the Windows 2003 Server is shared and users can access the folder through a shared drive. For the application to access the database, it uses an ODBC connection to the MSSQL server which originally used the SA password. We have recently switched to using Windows Integrated Authentication because we believe it offers a higher level of security. However the only way in which we have been able to enable this is to add the windows users to the SQL server. The problem with this is that the application sets permissions for individual users on what records they can see within the database. We have found that by adding the windows users to the SQL Server, they can bypass the permissions the set by the application by simply using any application that can use an ODBC connection, such as Enterprise Manager, and see all the database. One way around this would be to set up domains of users with access privileges to the tables which reflect the permissions set by the application, and configuring a view of the data so they may only see the records that they have permissions to. However to do this would require a high administrative cost to ensure that changes made in the application are reflected in the privileges of the SQL server. Instead, is there a way the SQL server can authenticate that the ODBC connection is coming from the correct application using Windows Integrated Authentication? This would allow the applcation to determine security, and stop users from connecting to the SQL server using other applications. Alternatively, can the SQL server, using Windows Integrated Authentication, also ask the application to supply a username and password? Any help with this matter would be greatly appreciated. Thanks!
View Replies !
Using Windows Authentication V/s Mixed Authentication
Hi, Say, I have configured my SQL to use Mixed Authentication. Now, I have a applicaiton which uses my SQL Server. The application just creates a database in SQL Server and uses the database to store its information. This application also has a SYSTEM DSN under ODBC through which it accesses the database. For the application to access this database, should I only use SA (as my SQL instance is configured to use Mixed Authentication) or can I use Windows Authentcation too... If I should only use SA, do we have a documentation which talks about this. Thanks Santhosh
View Replies !
Unable To Connect To SQL SERVER 2005 Database Engine Using Windows Authentication Under Windows Vista...
Hallo there, I just upgraded from Windows XP Pro to Windows Vista Bussiness and tried to reinstall SQL Server 2005 Developers Edition. After the installation i downloaded (using microsoft windows update) and installed all the service packs for sql and vista available. My problem is when i open sql server management studio and try to connect to my default instance using windows authentication and database engine, an 18456 error occurs. I enabled all the protocols and all the ports I disabled windows firewall and antivirus (eset nod32) I installed all service packs available I have also installed Visual Studio 2005 without installing sqlexpress But nothing happens! Please i am very desperate, any information will be gratefully accepted. This is my installation Information Code Snippet Microsoft SQL Server Management Studio 9.00.3042.00 Microsoft Analysis Services Client Tools 2005.090.3042.00 Microsoft Data Access Components (MDAC) 6.0.6001.18000 (longhorn_rtm.080118-1840) Microsoft MSXML 3.0 5.0 6.0 Microsoft Internet Explorer 7.0.6001.18000 Microsoft .NET Framework 2.0.50727.1434 Operating System 6.0.6001 Thank you in advance, Patonios
View Replies !
Report Server Authentication Errors (custom Security Authentication)
This has been plauging us for a year now and still haven't figured it out. We wrote a custom authentication extension based completely off the example code MS provided with SQL Server 2005. We upgraded to SP2 thinking it might fix the problem. Nope... here is what happens... you go to our server and there is a pause for about 5 seconds then the login page shows up I login with a user and pass then it just sits there with the loading icon spinning in IE. Eventually (this happens every time!) it comes back with Code Block "The report server is not responding. Verify that the report server is running and can be accessed from this computer. " If you refresh that page it loads fine! ok seems odd... went ot the LogFiles folder and there is a minidump and a bunch of logs around the time that happened. Open ReportServerWebApp's log file and I get this Code Block Microsoft SQL Server Reporting Services Version 9.00.3161.00 en-US Eastern Daylight Time C:Program FilesMicrosoft SQL ServerMSSQL.3Reporting ServicesLogFilesReportServerWebApp__10_31_2007_13_49_48.log NODEC Microsoft Windows NT 5.2.3790 Service Pack 2 5.2.3790.131072 w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing MaxActiveReqForOneUser to '20' requests(s) as specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing MaxScheduleWait to default value of '1' second(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing DatabaseQueryTimeout to default value of '30' second(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing ProcessRecycleOptions to default value of '0' because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing RunningRequestsScavengerCycle to default value of '30' second(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing RunningRequestsDbCycle to default value of '30' second(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing RunningRequestsAge to default value of '30' second(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing CleanupCycleMinutes to default value of '10' minute(s) because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing DailyCleanupMinuteOfDay to default value of '120' minutes since midnight because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing WatsonFlags to default value of '1064' because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing WatsonDumpOnExceptions to default value of 'Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException,Microsoft.ReportingServices.Modeling.InternalModelingException' because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing WatsonDumpExcludeIfContainsExceptions to default value of 'System.Data.SqlClient.SqlException,System.Threading.ThreadAbortException' because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing SecureConnectionLevel to default value of '1' because it was not specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing DisplayErrorLink to 'True' as specified in Configuration file. w3wp!library!1!10/31/2007-13:49:49:: i INFO: Initializing WebServiceUseFileShareStorage to default value of 'False' because it was not specified in Configuration file. w3wp!ui!1!10/31/2007-13:49:57:: e ERROR: The report server is not responding. Verify that the report server is running and can be accessed from this computer. w3wp!ui!1!10/31/2007-13:49:57:: e ERROR: HTTP status code --> 500 -------Details-------- Microsoft.ReportingServices.UI.Global+RSWebServiceWrapper+CantCommunicateWithReportServerException: The report server is not responding. Verify that the report server is running and can be accessed from this computer. at Microsoft.ReportingServices.UI.Global.RSWebServiceWrapper.GetSecureMethods() at Microsoft.SqlServer.ReportingServices2005.RSConnection.IsSecureMethod(String methodname) at Microsoft.SqlServer.ReportingServices2005.RSConnection.ValidateConnection() at Microsoft.ReportingServices.UI.Global.SecureAllAPI() at Microsoft.ReportingServices.UI.ReportingPage.EnsureHttpsLevel(HttpsLevel level) at Microsoft.ReportingServices.UI.ReportingPage.ReportingPage_Init(Object sender, EventArgs args) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Web.UI.Control.OnInit(EventArgs e) at System.Web.UI.Page.OnInit(EventArgs e) at System.Web.UI.Control.InitRecursive(Control namingContainer) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) w3wp!ui!1!10/31/2007-13:49:59:: e ERROR: Exception in ShowErrorPage: System.Threading.ThreadAbortException: Thread was being aborted. at System.Threading.Thread.AbortInternal() at System.Threading.Thread.Abort(Object stateInfo) at System.Web.HttpResponse.End() at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String errMsg) at at System.Threading.Thread.AbortInternal() at System.Threading.Thread.Abort(Object stateInfo) at System.Web.HttpResponse.End() at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String errMsg) Clearly showing there is an error that the server isn't responding... ok more log info on this in the SQLDmp log file that says Code Block Microsoft SQL Server Reporting Services Version 9.00.3161.00 en-US Eastern Daylight Time C:Program FilesMicrosoft SQL ServerMSSQL.3Reporting ServicesLogFilesReportServer__10_31_2007_13_53_27.log NODEC Microsoft Windows NT 5.2.3790 Service Pack 2 5.2.3790.131072 w3wp!webserver!6!10/31/2007-13:53:27:: i INFO: Reporting Web Server started w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing ConnectionType to '0' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing IsSchedulingService to 'True' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing IsNotificationService to 'True' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing IsEventService to 'True' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing PollingInterval to '10' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing WindowsServiceUseFileShareStorage to 'False' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MemoryLimit to '60' percent as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing RecycleTime to '720' minute(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MaximumMemoryLimit to '80' percent as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MaxAppDomainUnloadTime to '30' minute(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MaxQueueThreads to '0' thread(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing IsWebServiceEnabled to 'True' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MaxActiveReqForOneUser to '20' requests(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing MaxScheduleWait to '5' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing DatabaseQueryTimeout to '120' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing ProcessRecycleOptions to '0' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing RunningRequestsScavengerCycle to '60' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing RunningRequestsDbCycle to '60' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing RunningRequestsAge to '30' second(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing CleanupCycleMinutes to '10' minute(s) as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing DailyCleanupMinuteOfDay to default value of '120' minutes since midnight because it was not specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing WatsonFlags to '1064' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing WatsonDumpOnExceptions to 'Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException,Microsoft.ReportingServices.Modeling.InternalModelingException' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing WatsonDumpExcludeIfContainsExceptions to 'System.Data.SqlClient.SqlException,System.Threading.ThreadAbortException' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing SecureConnectionLevel to '0' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing DisplayErrorLink to 'True' as specified in Configuration file. w3wp!library!6!10/31/2007-13:53:27:: i INFO: Initializing WebServiceUseFileShareStorage to 'False' as specified in Configuration file. w3wp!resourceutilities!6!10/31/2007-13:53:27:: i INFO: Reporting Services starting SKU: Standard w3wp!resourceutilities!6!10/31/2007-13:53:27:: i INFO: Evaluation copy: 0 days left w3wp!resourceutilities!6!10/31/2007-13:53:27:: i INFO: Running on 2 physical processors, 4 logical processors w3wp!runningjobs!6!10/31/2007-13:53:27:: i INFO: Database Cleanup (Web Service) timer enabled: Next Event: 600 seconds. Cycle: 600 seconds w3wp!runningjobs!6!10/31/2007-13:53:27:: i INFO: Running Requests Scavenger timer enabled: Next Event: 60 seconds. Cycle: 60 seconds w3wp!runningjobs!6!10/31/2007-13:53:27:: i INFO: Running Requests DB timer enabled: Next Event: 60 seconds. Cycle: 60 seconds w3wp!runningjobs!6!10/31/2007-13:53:27:: i INFO: Memory stats update timer enabled: Next Event: 60 seconds. Cycle: 60 seconds w3wp!library!6!10/31/2007-13:53:27:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details., ; Info: Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException: An internal error occurred on the report server. See the error log for more details. ---> System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.ReportingServices.WebServer.WebServiceHelper.ConstructRSServiceObjectFromSecurityExtension() at Microsoft.ReportingServices.WebServer.Global.ConstructRSServiceFromRequest(String item) at Microsoft.ReportingServices.WebServer.Global.get_Service() at Microsoft.ReportingServices.WebServer.Global.DispatchRequest(Boolean& transferedToViewerPage) at Microsoft.ReportingServices.WebServer.Global.Application_AuthenticateRequest(Object sender, EventArgs e) --- End of inner exception stack trace --- says there is a ReportingServices.Diagnostics.Utilities.InternalCatalogException, well when I step through the code in the debugger this happens in a region I can not step through... and in my IIS logs I have this Code Block2007-10-31 17:54:30 W3SVC1 10.10.2.15 GET /reports/Pages/Folder.aspx - 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 302 0 0 2007-10-31 17:54:32 W3SVC1 10.10.2.15 GET /Reports/Pages/UILogon.aspx ReturnUrl=http%3a%2f%2freschsql%2freports%2fPages%2fFolder.aspx 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 200 0 0 2007-10-31 18:01:10 W3SVC1 10.10.2.15 POST /reportserver/ReportService2005.asmx - 80 - 10.10.2.15 - 500 0 0 2007-10-31 18:01:10 W3SVC1 10.10.2.15 POST /Reports/Pages/UILogon.aspx ReturnUrl=http%3a%2f%2freschsql%2freports%2fPages%2fFolder.aspx 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 200 0 0 2007-10-31 18:01:41 W3SVC1 10.10.2.15 POST /reportserver/ReportService2005.asmx - 80 - 10.10.2.15 - 200 0 0 2007-10-31 18:01:41 W3SVC1 10.10.2.15 POST /Reports/Pages/UILogon.aspx ReturnUrl=http%3a%2f%2freschsql%2freports%2fPages%2fFolder.aspx 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 302 0 0 2007-10-31 18:01:47 W3SVC1 10.10.2.15 POST /ReportServer/ReportService2005.asmx - 80 - 10.10.2.15 - 500 0 0 2007-10-31 18:02:23 W3SVC1 10.10.2.15 POST /ReportServer/ReportService2005.asmx - 80 - 10.10.2.15 - 500 0 0 2007-10-31 18:02:24 W3SVC1 10.10.2.15 GET /reports/Pages/Folder.aspx - 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 302 0 0 2007-10-31 18:02:25 W3SVC1 10.10.2.15 GET /Reports/Pages/UILogon.aspx ReturnUrl=http%3a%2f%2freschsql%2freports%2fPages%2fFolder.aspx 80 - 10.10.9.16 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.590;+.NET+CLR+3.5.20706) 200 0 0 Anyone have ANY idea of what is going on here? This is really a big problem for production code to lag and throw back timeout errors everytime someone wants to run a report. Thanks!
View Replies !
Sql Authentication Vs. Windows Authentication
I am in the process of rolling out a sql server 2005 enterprise install and had a question regarding authentication. We will be providing sql hosting for a number of groups on our campus, many who are not using our campus-wide active directory, though they all have an AD account. Windows authentication via the management studio appears to use your AD authentication tokens and will not allow them to enter a username/password combo. Is there any way to configure this? I would like to use our campus AD for obvious reasons but if there is a requirement for passing tokens this isn't going to work right? It's also going to make database mirroring more of a challenge. Thanks
View Replies !
New To MS SQL Server, Need Help With Windows Authentication
I am new to the whole ASP .NET scene, so my knowledge is very limited, and if I’m not clear enough please let me know. I am reading a book published by APress about ASP .NET with C# and I am at the point where I get to begin working with data (fun!!). The problem is that I’m not able to connect to the SQL Server. I have Server 2003 and SQL Server 2005 running on a separate machine than the computer that I use for development – the server is named THESERVER, the SQL server is named THESQLSERVER, and the computer I use for development is my laptop named MYLAPTOP. So here’s my connection string (I put this in my web.config XML file):<add name="Pubs" connectionString="DataSource=THESERVERTHESQLSERVER; Initial Catalog=pubs;Integrated Securit=SSPI"/> Now here’s what my book reads: For Windows authentication to work, the currently logged-on Windows user must have the required authorization to access the SQL database. This is all it says about Windows authentication because the book assumes that I am running MS SQL Express off localhost. Questions: Does the book mean that I will have to add a user to my server for my laptop? If so, how do I log into this user using the connection string?What does it mean by “the current logged-on Windows user”? Is that referring to the user on my laptop, or a user on the server? I’ve been reading around trying to find more information on exactly how Windows authentication works, but I keep coming up dry. I know that much of this is probably trivial to a lot of you, which is why I am asking because it isn’t to me. Well, thanks in advance for any help that you can provide me.
View Replies !
Windows Authentication With SQL Server
I have an asp.net page which accesses a sql server database (on another server). I am trying to use impersonation to impersonate the domain user accessing the page and use the credentials to access the sql server using a windows login. I have windows authentication checked in IIS settings am using the following web.config:<configuration> <system.web> <authentication mode="Windows" /> <identity impersonate="true"/> <authorization> <allow users="*" /> </authorization> <customErrors mode="Off" /> </system.web> </configuration> I can connect fine when i open the page on the IIS server but from other machines, whilst logged in as the same domain user I get the error: Login error failed for user ''. Anybody know what the problem might be?
View Replies !
Windows Authentication Vs SQL Server
Hello, I'm writing some software for clients and the connection is done via de username passwd methode, not windows authentication. One of the salespeople is creating FUD now, talking about a "major security leak" because, if someone has the username / password, he can view the data in the mssql database. ( seems normal to me for a username/password combination - winNT or not - but this news can be shocking to the uninitiated) Is there any paper on his comprehensionlevel that deals with this issue? Or you've got an opinion on this? Thanx for any pointers, W13
View Replies !
SQL Server - Windows Authentication
Ours is distributed WinForms application. Application logon is using Windows integrated authentication. As a best practice I would like to use Windows authentication for SQL Server connection. This means that when the user logons on to the workstation, the user will gain access to the application and also to the SQL Server. But there is a requirement that the end user cannot directly login to the database. So if the user tries to access Sql server database through some client tools I shouldn't allow that. How can I achieve this? Thanks
View Replies !
Windows Authentication With IIS And SQL Server
Hi, We are changing our web application to use Windows Authentication instead of SQL Server Authentication. Initially, we added the IUSR_MACHINENAME user to SQL Server. This works ok when SQL Server and IIS are both running on the same server. However, this won't work if SQL Server and IIS are on different servers on the same domain. After doing a lot of research on the internet, it seemed that the answer was to create a user on the domain and use that user in IIS as the anonymous user (and give that user the relevant rights on SQL Server). However, I've seen other comments in articles on the internet saying "Running any web service as a domain user is ill-advised". We are using ASP rather than ASP.NET. What is the correct (and most secure) way to go about this? Best Matt.
View Replies !
SQL Server Windows Authentication Doubt
When I use Windows authentication on My SQL Server Database, I can use Windows accounts to define access to read/write/modify databases, right ? But, when someone access a ASP.NET Web Site that access this Database wich user is that going to be ? The IIS users ? IWAN_SRV and IUSR_SRV ? Thanks
View Replies !
How To Use Windows Authentication To Access SQL Server
hello ,I have a problem with connecting to SQL Server by Windows Authentication.It's the error:"Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. "and this is a source code :"SqlConnection cn = new SqlConnection ("Data Source=PLGRZFLS0001;Initial Catalog=Magazyn;Integrated Security=SSPI;Trusted_Connection=Yes");cn.Open();SqlCommand cmd = new SqlCommand("exec proc_permission",cn); SqlDataReader dr= cmd.ExecuteReader() ;dr.Read(); "in my web.config :<authentication mode="Windows" /> <identity impersonate="true"/>i have no idea what is wrong :(:( bye,sorry for my english
View Replies !
Windows Group Authentication In SQL Server
Does anyone know how windows authentication works in SQL Server 2005 with regard to group membership? If a user is a member of two NT groups that have the same permissions in SQL then which group will be used to authenticate their login? The reason I ask is that logins have default languages associated with them so if a user is a member of NT group A with a default language of British English and is also a member of group B with a default language of US English then which one will be used and will it be the same one every time?
View Replies !
Using C# To Access SQL Server At Another PC With Windows Authentication
Brief Description: I would like to use C# to write a program to access a SQL Server instance which is at another PC and using Windows Authentication. (I know how to use SQL Server Authentication, but I need to use Windows Authentication only.) Detailed Description: 1. I have two PCs, and I would like to write a C# program in PC1. to access SQL Server at PC2 with Windows Authentication only. 2. I installed Microsoft Dynamics POS system. I install the POS Database with Windows Authentication only at PC2, but then I can install POS at my PC1, and when I set up the connection to the SQL Server, POS will pop up a dialog to ask me the username and password. I can just use the PC2's windows user account to login. Then POS can work fine. I would like to do the same just like what they did. 3. I tried the following code at the PC2 (the same PC as the SQL Server running), and it is running fine. But if I copy the same program and run it at another PC, then it will pop up a "Logon failuer: unknown user name or bad password.". Microsoft.SqlServer.Management.Common.ServerConnection myServerConn = new Microsoft.SqlServer.Management.Common.ServerConnection();myServerConn.LoginSecure = true;myServerConn.ConnectAsUser = true;myServerConn.ConnectAsUserName = "username";myServerConn.ConnectAsPassword = "myPassword";myServerConn.ServerInstance = "myPCName\mySQLInstance";myServerConn.Connect(); Please help! Thank you!
View Replies !
Question On Connection To SQL Server Using Windows Authentication
I have a domain user account through which I can log on a machine. The machine allows me to use this domain user account to create DB in SQL Server using windows authentication. How can I define a connection string to connect SQL Server? My connection string is like: string str = "server=(local);uid='"+userName+"';password='"+password+"';database='master';connection timeout=15"; This one works on another machine where I use SA account. But this one does not work using windows authentication. I tried to use domainnamemyname as user name, but failed. Could any one give me some suggestion?
View Replies !
Connecting To The SQL Server 2000 With Windows Authentication
Hi All, I want to know how I can connet to the SQL Server 2000 (using Enterprise Manager or SQL Query Analyzer) with Windows Authentication, but with other user account under different UNTRUSTED domain. I searched on the Internet and found that I can save my password in the "Manage Passwords" of the "User Accounts" in the Control Panel. But in our company a policy has been setup that prevents us from saving passwords, so this is not working. I tried runas command like this: runas /netonly /user:untrusted_domain\%UserName% "C:Program FilesMicrosoft SQL Server80ToolsBinnisqlw.exe" But since the usernames are same in both untrusted domains with different passwords, my main user account will be locked out. I wanted to know if anyone knows any solution for this. Any help is really appreciated.
View Replies !
Windows Authentication Failed For SQL Server 2000
Logins failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (microsoft SQL Server, Error: 18452) Hi Guys. How are you, its something very complicated to understand my issue. i am receiving the above error message when i tried to login with using windows accout to connect to SQL server Instance using client tool. ok Let me start step by step. 1) Initially we have one box using windows 2000 (OS) and having SQL Server 2000. 2) Here on SQL Server instance i have created windows account login and gave permissions to one of the database on that instance. 3) this windows account is in the right domain and also in the same domain 4) when i right click on Management Studio on the different machine --> Run As--> enter the windows account --> select the above Sql server instance.then connect 5) Here i am not able to connect to the sql server. the below error generates when i press the connect button Logins failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (microsoft SQL Server, Error: 18452) if we gave the full permission to connect to box with this windows account then i am able to connect the sql server instance, otherwise its not allowing me to connect to the Sql server instance. we have another box using windows 2000 (OS) and having SQL Server 2005. i have followed the same as above with same windows account login. Here i am able to connect to the SQL Server Instance and also this windows account donot have permission to connet the box. Anybody have idea about this issue??? if the SQL server 2000 doesnot have the option to connect remotely. unless that windows account have the full permissions to box. if you have any white paper please let know. i really appreciate for your effort, if you dont understand please let me know. thanks so much. Raghu
View Replies !
Connecting To The SQL Server 2000 With Windows Authentication
Hi All, I want to know how I can connet to the SQL Server 2000 (using Enterprise Manager or SQL Query Analyzer) with Windows Authentication, but with other user account under different UNTRUSTED domain. I searched on the Internet and found that I can save my password in the "Manage Passwords" of the "User Accounts" in the Control Panel. But in our company a policy has been setup that prevents us from saving passwords, so this is not working. I tried runas command like this: runas /netonly /user:untrusted_domain\%UserName% "C:Program FilesMicrosoft SQL Server80ToolsBinnisqlw.exe" But since the usernames are same in both untrusted domains with different passwords, my main user account will be locked out. I need a command or script to establish Windows Authentication with the remote server. And use this session to connect to the SQL Server. Any help is really appreciated.
View Replies !
Windows Authentication Fails If IIS And SQL Server Are On Different Servers
Hi I am using SQLXML 3 on a Windows 2003 server Running IIS 6.0. I used SQLXML configure IIS Support to create a virtual directry on this server to connect to MS SQL Server 2000 instance running on another windows 2003 server. Configurations for the virtual directory are 1. Used Windows integrated authentication. 2. Created template for executing the stored procedure. When i try to access the DB Server through a browser i am prompted to provide for Windows authentication. Even if i provide the domain user that has administrtive rights on both the server i am getting a response. ERROR: 400.100 Bad Request HResult: 0x80046000 Source: Microsoft SQL isapi extension Description: Invalid connection settings: access denied If from MMC i change the properties of the virtual directry to enable anonymous acess using the cridentials that i mentioned earlier, everything is working fine. I have been searching the net for 2 days and tried everything that i could find but still i keep getting the same error. Any help will be highly appretiated.
View Replies !
SQL Server Windows Authentication Passthrough Problem
I am running my laptop separate from a domain with a local user that has the same username as password as my domain account. Under Windows XP -> User Accounts -> Manage My Network Passwords I could passthrough my domain credentials to allow myself access to the SQL Server using windows authentication. This is confirmed to have worked with both SQL Server 2000 and SQL Server 2005 from Windows XP. My current laptop is now running Windows Vista and this method seems to work fine for network access, but does not seem to work for SQL Server authentication using Windows authentication and I receive the following error. Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (Microsoft SQL Server, Error: 18452). Any assistance would be appreciated.
View Replies !
Regarding Data Encryption And Windows Authentication For MS SQL Server 2005
Dear all,I'm quite new in dealing with SQL security. Recently I have been tasked to check whether Windows Authentication is the right way to go for a web application authentication, as well as windows Mobile/embeded application authentication (by syncing the info from web application to another table used for PDA login. Users are required to login once in the Web Application to allow it to collect and authenticate user based on windows credential once they're logon to the domain and their computer. Then username and password will then be sync to another database. Then, user can start using their PDA and login by keying in their username and password to match against what was sync from the Web application database.Is this safe for an enterprise level application which involves more than 70 people? Also, how can I secure and encrypt the data send to and fro between the Web application and the client PC/PDA, as well as the data rest in the database? Is there anyway to achieve that, thus, disallowing unwanted attack on SQL server and exploitation to avoide data loss and information theft? Thanks. Regards,Jenson
View Replies !
Error When Writing To SQL Server Through Asp Page Using Windows Authentication
I have an asp drive web page that writes a row to a table on sqlserver 2000. The web site is set to use windows authenication and thesql server is set to use windows authentication.This process works fine on windows xp sp 1 machines but on win2k sp4machines logged in as the same user i get the errorAn error occurred making the change -2147217843 Error connection toSQL Server: [Microsoft][ODBC SQL Server Driver][SQL Server]Loginfailed for user '(null)'. Reason: Not associated with a trusted SQLServer connection.can anyone explain why win2k client would have this issue and notwinxp clients?Glenn
View Replies !
Save SSIS Package On SQL Server Using Windows Authentication
I am creating SSIS packages on the fly using C#.net. I need to save SSIS packages on a SQL Server using windows authentication. I have found a way to save the package using SQL authentication Microsoft.SqlServer.Dts.Runtime.Application .SaveToSqlServer(Package pkg,IDTSEvents evts,string serverName,string serverUserName,string serverPassword) Can you give me a solution for saving SSIS packages using windows authentication, as it is a must in my project.
View Replies !
Connecting To SQL Server 2005 Remotely Via Windows Authentication
Hi I have installed SQL Server 2005 onto a server and then on my client machine I have installed SQL Server 2005 and the Server Management Studio. When installing it on the server I chose all the defaults so have not setup an sql username or password to connect as I thought I could use Windows. I go to the Server Management and registered servers, create a new one and enter the ip address of the server and choose Windows Authentication. The following error keeps appearing though and I am not sure what settings/where to check: Login failed for user ''. The user is not associated with a trusted SQL Server connection. (.Net SqlClient Data Provider) I have checked and think port 1443 is open on the server, tcpip is enabled but when I choose Windows authentication I cannot enter a username or password as it is greyed out. It has completed the username but no password and these are not the correct ones to connect to the server - I wish to wish the same one I use for RDC. Or should I try SQL Authentication and if so how would I set this up? Cannot see on the server in SQL Configuration where I could set this? Hope someone who knows a lot more than me on this can help! Thanks for your time - this has been driving me mad for days now and everything I print off the internet is not help so any feed back or more useful links to loo up would be great.
View Replies !
Using Openrowset To Retrieve Data From A Server Under Windows Authentication
Hi, I am getting an error 'Server: Msg 7416, Level 16, State 2, Line 1 Access to the remote server is denied because no login-mapping exists' when i run the below code, SELECT a.* from OPENROWSET('SQLOLEDB', 'Data Source=SA3KNX; Integrated Security=SSPI; Initial Catalog=[Mis Mart]; Persist Security Info=False; Initial Catalog=Mis Mart;', 'select * from [Mis Mart].dbo.Dim_Cus') as a Can you please help resolve this. The server SA3KNX uses windows authentication and I run this code in another serer 'SEBDTD3' which uses SQL server authentication. How can i retrieve data from a server that uses windows authentication. Regards, Sharan.
View Replies !
Using Openrowset To Retrieve Data From A Server Under Windows Authentication
Hi, I am getting an error 'Server: Msg 7416, Level 16, State 2, Line 1 Access to the remote server is denied because no login-mapping exists' when i run the below code, SELECT a.* from OPENROWSET('SQLOLEDB', 'Data Source=SA3KNX; Integrated Security=SSPI; Initial Catalog=[Mis Mart]; Persist Security Info=False; Initial Catalog=Mis Mart;', 'select * from [Mis Mart].dbo.Dim_Cus') as a Can you please help resolve this. The server SA3KNX uses windows authentication and I run this code in another serer 'SEBDTD3' which uses SQL server authentication. How can i retrieve data from a server that uses windows authentication. Regards, Sharan.
View Replies !
Can Not Connect To SQL Server 2000 On Windows Authentication Mode
Hello everyone, We have SQL server 2000 on windows 2000. From our desktop MS Access was connected to database through ODBC. Since yesterday (after our consultant had updated another asp application in the same server) we are getting €œSQL Server Error: 18452. €¦.. Login failed for user €˜(null)€™. Reason: not associated with a trusted SQL Server connection. €œ The consultant saying he did not touch any settings on server (?). And the problem is even server€™s security property shows it has mixed mode authentication. But I cannot connect to server even through my SQL server enterprise manager in windows authentication mode. I can connect if I use SQL server authentication. Through ODBC I can connect also and test fine, if I use SQL authentication. But the Access application wouldn€™t connect using SQL authentication in ODBC. So, can any one help me to find out what else could be done to make sure that the server is going to accept windows authentication. I€™m thinking any other settings or registry change €¦ etc. Please help. Thanks
View Replies !
SQL Server 2005 Enable Sa Login && Disable Windows Authentication
HI all, I would like to ONLY allow using SQL Server authentication and restrict Windows Authentication. At the moment, i set the security to "SQL server and windows authentication". Now, even though i set the password for "sa", i can ignore the SQL Server authentication and just use Windows authentication to manipulate database objects??? can anybody give some suggestions to restrict windows authentication and allow sql server authentication?. Thanks in Advance Best Regards Ihsan
View Replies !
Intranet, Windows Authentication, Sql Server Login Failed For User '(null)'
Hi-- I am building an intRAnet website using windows authentication for website access and SQL Server access ( Trusted_Connection = true ). In IIS I have these settings: Allow Anonymous = unchecked (false) Windows Authentication = Checked (true) Digest windows = checked (true) In my Web.Config file: authentication="windows" impersonate="true" allowusers="*" When I pull up the page these are my credentials: Security.Principal.Windows: mydomainmyuserid (this is correct what it shows on my page) Me.User.Identity: mydomainmyuserid (this is correct what it shows on my page) Threading.currentThread.currentUser mydomainmyuserid (this is correct what it shows on my page) So the ASP.NET page recognizes it is me and my domain. However, when i click a button to pull some data from a database I get the error message: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. My data access on SQL Server works fine. The weird thing is when I debug on my machine it pulls data fine. but when I copy the files to the windows 2003 server it doesn't work. Do i have to do something with delegation?
View Replies !
Windows Authentication
My SQLExpress seems to be set for windows authentication and not sql server authentication ... I am not quite sure why it is set to windows authentication - I installed this with Visual Studio 2005 and it just seemed to be set that way.Am I able to change this - if I choose sql authentication when connecting I get an errorIf someone could answer this point I would be most grateful !!Patrick
View Replies !
Windows Authentication
Hi all,You're all stars, really helpful. Maybe one day i can be :)My question is regarding the authentication in Windows SQL Server 2005.We have setup a sa account. We purchase software from a third partythat runs on it. Before their software logs on the sql server as sa,and does its own access control, windows autentication takes over. Itslogs users on correctly i guess, using a more secure link via thedomain. However, I am probably blind, but where can we assign rights toeach domain user? I.e. stop XXY dropping tables, but allow ABC to droptables?I had a brief look through but could not find anything that stood out,in the SQL Manager.ThanksDavidP.S This is SQL Server 2005 Workgroup edition running on a 2003 windowsdomain server. Alongside a SQL 2000 server, which is running fine usingsa accounts.For those in the same timezones as me... have a good evening.
View Replies !
Windows Authentication
Hi! Happy New Year!I'm having windows authetication connection problem. Although I cansee all the servers by using SQL Server authentication conncection, Ican see only some of the SQL family servers by using windowsauthentication connection. I checked the servers' properties of that Ican and can't see, but couldn't find any difference. Can someone giveme a direction that will enable me to debugg?If the servers are not in the same domain, how can I see them (windowsauthentication) from the same PC (client)?For some SQL server I even can not login via windows authentication atterminal server. Is any specific setup I should do at server?Thanks!Saiyou
View Replies !
SA To Windows Authentication
Hello,We have a SQL 2000 installation (running on NT4 SP6a) with a databaseaccessed by a client application. Currently the application logs into thedatabase using a the SA account. I'd like to move the client access over toWindow Authentication. Each user has their own NT account. What steps do Ineed to take to achieve this?Any help would be greatly appreciated.James G.
View Replies !
Windows Authentication
I'm having problems with windows authentication. I'm new to using using Microsoft SQL Server. I just migrated from powerbuilder 8 to powerbuilder 10. I'm using OLE DB and can't get the windows authentication to work within the application. Can anyone help....
View Replies !
Windows Authentication
Hi, I am wondering that do we need to create the separate login at SQL SERVER (server) for all the user using the application for the windows authentication? How do the windows authentication works? I have a apllication and SQL SERVER (SERVER) running on the same machine. Any user from the same domain can access the application. Application is interacting with the DB through Windows Authentication. Now my question is whether do we need to authenticate each user from the domain at the DB level. That is to craete the login id for all the user for windows authentication. Thanks, Rahul Jha
View Replies !
|